mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-05 09:05:40 +00:00
suggested alternate test for TSIG signature
feel free to remove this commit if you prefer the other method.
This commit is contained in:
@@ -40,7 +40,7 @@ EOF
|
||||
}
|
||||
|
||||
# Weak verification that TKEY response is signed.
|
||||
grep "flags: qr; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1" nsupdate.out${num} > /dev/null || {
|
||||
grep "TSIG PSEUDOSECTION" nsupdate.out${num} > /dev/null || {
|
||||
echo "I:bad tkey response (not tsig signed)"
|
||||
return 1
|
||||
}
|
||||
|
Reference in New Issue
Block a user